Not yet scoredPublished Aug 28, 2026

CVE-2026-80679s390/dasd: Fix potential NULL pointer dereference

Updated under an hour ago (Oct 27, 2026, 1:00 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasd_release_space() checks the implementation of the is_ese() discipline function before calling it to determine if a given device is an ESE DASD. The current usage of the logical AND operator will lead to a NULL pointer dereference as the function is called even if the function pointer is NULL. Fix this by using the logical OR operator.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 28, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 91dc4a197569230683ca8bad551e655a4bf14c30 before dbf2ae34d2f1390a9fc1abf3dce7f809e022caae; from 91dc4a197569230683ca8bad551e655a4bf14c30 before 3000367a512b1283ca52230bf21f8c91dfbec45b; from 91dc4a197569230683ca8bad551e655a4bf14c30 before cdc7b73d0c5a9cd6360b4f8c36eae23b02097e4c; from 91dc4a197569230683ca8bad551e655a4bf14c30 before e156c70c505c6c9adce3b7be5a82025f00544709; from 91dc4a197569230683ca8bad551e655a4bf14c30 before 3453a993a3f14c1684560ecf26585046976f6ac6; 91dc4a197569230683ca8bad551e655a4bf14c30 builds before 86cdfd061509bcde84f3145f7221ba64e3e53b1f; from 91dc4a197569230683ca8bad551e655a4bf14c30 before 96b8e09b09539f252a5eeea6baebd93c2e3779bd; from 91dc4a197569230683ca8bad551e655a4bf14c30 before 9973026f572db6b67570cadc30942f3014e41079	CNA record

References

References

https://git.kernel.org/stable/c/dbf2ae34d2f1390a9fc1abf3dce7f809e022caae
https://git.kernel.org/stable/c/3000367a512b1283ca52230bf21f8c91dfbec45b
https://git.kernel.org/stable/c/cdc7b73d0c5a9cd6360b4f8c36eae23b02097e4c
https://git.kernel.org/stable/c/e156c70c505c6c9adce3b7be5a82025f00544709
https://git.kernel.org/stable/c/3453a993a3f14c1684560ecf26585046976f6ac6
https://git.kernel.org/stable/c/86cdfd061509bcde84f3145f7221ba64e3e53b1f
https://git.kernel.org/stable/c/96b8e09b09539f252a5eeea6baebd93c2e3779bd
https://git.kernel.org/stable/c/9973026f572db6b67570cadc30942f3014e41079

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.